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Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the 
application: 
Listing of Claims 

Claim 1 (Currently amended): A communication system having a server for providing a Web 
E-mail service to a client, wherein said server comprises: 

management means for managing a key for decrypting an encrypted E-mail message 
addressed to a user's mail address, wherein the key for decrypt ing the encrypted E-mail 
message is not managed bv the client ; 

web encryption communication means for establishing a Web encryption 
communication with the client, and communicating with the client by the establish e d Web 
encryption communication established bv said web encryption comp -" rm '<*-fltin n means: 

authentication means for executing authentication of the a use allowance of the 
manag e d key managed by said management means to said the client when said the client 
requests to decrypt the encrypted E-mail message while said the server communicates with the 
client by said established Web encryption communication; 

decrypting means for decrypting the encrypted E-mail message using the managed key 
managed bv said management means in the case where the use allowance of the key managed 
bv said management means is authenticated by said authentication means; and 

transmission control means for controlling to transmit the E-mail message decrypted by 
said decrypting means to said the client through said oGtablichcd the Web encryption 
communication established bv said web encryption communication means . 
Claim 2 (Cancelled) 
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Claim 3 (Previously presented): The communication system according to claim 1, wherein 
said authentication means provides said client with a window data to authenticate the use 
allowance of the managed key. 

Claim 4 (Previously presented): The communication system according to claim 1, wherein 
said authentication means authenticates the use allowance using a passphrase inputted from 
said client 

Claim 5 (Previously presented): The communication system according to claim 1, wherein 
said authentication means authenticates the use allowance based on a biometrics information of 
a user inputted from said client. 

Claim 6 (Previously presented): The communication system according to claim 1, wherein 
said web encryption communication means establishes the Web encryption communication 
. with the client by using SSL. 
Claim 7 (Cancelled). 

Claim 8 (Previously presented): The communication system according to claim 1, wherein 
said authentication means authenticates the use allowance of the managed key during a session 
of the Web encryption communication continuously established between said client and a 
server. 

Claim 9 (Previously presented): The communication system according to claim 8, wherein 
said authentication means stops said authenticated use allowance, in the case where at least 
either the case where the Web encryption communication is ended with an error or the case 
where the Web encryption communication has passed a fixed time is satisfied. 
Claim 10 (Previously presented): The communication system according to claim 1, wherein 
said server further comprises signature means for executing a digital signature to an E-mail 
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created by said client. 

Claim 11 (Previously presented): The communication system according to claim 1 , wherein 
said server further comprises: 

multiple use judging means forjudging whether the managed key is under multiple use, 

and 

stop means for stopping the use allowance of a session under multiple use in the case 
where the session is judged to be under multiple use by said multiple use judging means. 
Claim 12 (Previously presented): The communication system according to claim 1, wherein 
the key for decrypting the encrypted E-mail is a secret key in a code of a public key 
cryptosystem. 

Claim 13 (Currently amended): A communication system having a client receiving a Web E- 
mail service from a server, wherein the server comprises: 

management means for managing a key for decrypting an encrypted E-mail message 
addressed to a user's mail address, wherein the kev for decrypting the encrypted E-mail 
message is not managed by the client 

web encryption communication means for establishing a Web encryption 
communication with the client, and communicating with the client by the ostabliohcd Web 
encryption communication established bv said web encrypt ion nnminunication means: 

authentication means for executing authentication of tbs a use allowance of the 
managed key managed bv said management means to said the client based on authentication 
information sent from said the client when emd the client requests to decrypt the encrypted E- 
mail message while said the server communicates with the client by the established Web 
encryp^ 011 communication; 
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decrypting means for malring a decrypted message bv decrypting the encrypted E-mail 
message using the managed key managed bv said management means in the case where the use 
allowance of the key managed bv said management means is authenticated by said 
authentication means; and 

transmission control means for controlling to transmit the decrypted E-mail message 
decrypted by said decrypting means to said the client through the established Web encryption 
communication established by said Web encryption communication means, and 

wherein said the client comprises: 

request means for requesting to decrypt the encrypted E-mail message while said Web 
encryption communication is established between the server and the client; 

authentication information sending means for sending the authentication information to 
said authentication means; and 

receiving means for receiving the decrypted E-mail message transmitted by said 
transmission control means through said establish e d the Web encryption communication 
established bv said Web encryptio n commun ication means . 

Claim 14 (Currently amended): A method for controlling a communication system including a 
server for providing a client with a Web E-mail service, comprising: 

a management step of managing a key for decrypting an encrypted E-mail message 
addressed to a user's mail address, wherein the key for decrypting the encrypted E-mail 
message is not managed bv the client: 

a web encryption communication step for establishing a Web encryption 
communication with the client, and communicating with the client by the establishe d Web 
encryption communication established in said web encryption comm unication step: 
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an authentication step of executing authentication of &e a use allowance of the 
maaaged key managed in said management step to said the client when said the client requests 
to decrypt the encrypted email message while said the server communicates with the client by 
said established Web encryption communication; 

a decrypting step of decrypting the encrypted E-mail message using the manag e d key 
managed in said management step in the case where the use allowance of the key managed in 
said management step is authenticated in said authentication step; and 

a transmission control step of controlling to transmit the E-mail message decrypted in 
said decrypting step to said the client through said established the Web encryption 
communication established in the web encryption communication step . 
Claim 15 (Cancelled) 

Claim 16 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein, in said authentication step, a window data for authenticating 
the use allowance of the managed key is supplied to said client for authentication. 
Claim 17 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein, in said authentication step, the use allowance is authenticated 
using a passphrase inputted from said client. 

Claim 18 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein, in said authentication step, the use allowance is authenticated 
based on biometrics information of a user inputted from said client. 
Claim 19 (Previously presented): A method for controlling the communication system 

according to claim 14, wherein, in said server, said web encryption communication step 

i 

establishes the Web encryption communication with the client by using SSL. 
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Claim 20 (Cancelled). 

Claim 21 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein, in said authentication step, the use allowance of the managed 
key is authenticated during a session of the Web encryption communication continuously 
established between said client and -a server. 

Claim 22 (Previously presented): A method for controlling the communication system 
according to claim 21, wherein, in said authentication step, said authenticated use allowance is 
stopped in the case when at least either the case where the Web encryption communication is 
ended with an error or the case where the Web encryption communication has passed a fixed 
time is satisfied. 

Claim 23 (Previously presented): A method for controlling the communication system 
according to claim 14, further comprising a signature step of executing the digital signature to 
the E-mail created by said client in said server. 

Claim 24 (Previously presented): A method for controlling the communication system 
according to claim 14, further comprising a step of executing a multiple use judging step of 
judging whether the managed key is under multiple use in the server, and a stop step of 
stopping the use allowance of a session under multiple use in the case where the session is 
judged to be under multiple use in said multiple use judging step. 
Claim 25 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein the key for decrypting the encrypted E-mail is a secret key in an 
encryption of a public key cryptosystem. 

Claim 26 (Currently amended): A method for controlling a communication system including a 
client receiving a Web E-mail service from a server, comprising: 

i 
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a step of executing a management step of managing a key for decrypting an encrypted 
E-mail message addressed to a user's mail address, wherein the key for decrypting the 
encrypted E-mail message is not managed by the client, 

a web encryption communication step for establishing a Web encryption 
communication with the client, and communicating with the client by the established Web 
encryption communication established in said web encryption communication step, 

an authentication step of executing authentication of *be a use allowance of the 
manag e d key managed in said management step to said the client based on authentication 
information sent from said client when said the client requests to decrypt the encrypted E-mail 
message while said the server communicates with the client by the established Web encryption 
communication, 

a decrypting step of making a decrypted message bv decrypting the encrypted E-mail 
message using the managed key managed in said management step in the case where the use 
allowance of the key managed in said management step is authenticated in said authentication 
step, and 

a transmission control step of controlling to transmit the decrypted E-mail message 
decrypted in said decrypting step to said the client through the cotabliahcd Web encryption 
communication established in said web encryption communication step« 

wherein said the client comprises: 

a requesting step of requesting to decrypt the encrypted E-mail message while said Web 
encryption communication is established between the server and the client, 

an authentication information sending step of sending the authentication information for 
authentication in said authentication step, and 

I 
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a receiving step of receiving the decrypted E-mail message transmitted in said 
transmission step to the client through said e stablish ed the Web encryption communication 
established in the web encryption communication step . 

Claim 27 (Currently amended): A computer executable control program of a communication 
system including a server for providing a Web E-mail service to a client, said program 
comprising a management step of managing a key for decrypting an encrypted E-mail message 
addressed to a user's mail address, wherein (he key for decrypting the encrypted E-mail 
message is not managed by the client a web encryption communication step for establishing a 
Web encryption communication with the client, and communicating with the client by the 
establish e d Web encryption communication established in said web encryption communication 
step, an authentication step of executing authentication of the a use allowance of the managod 
key managed in said manaeement step to said the client when said tihe client requests to decrypt 
the encrypted E-mail message while said the server communicates with the client by said 
established Web encryption communication, a decrypting step of decrypting the encrypted E- 
mail message using the manag e d key managedin s_ai_d_ management step in the case where the 
use allowance of the key managed in said management step is authenticated in said 
authentication step, and a transmission control step of controlling to transmit the E-mail 
message decrypted in said decrypting step to said the client througjh said e stablish e d the Web 
encryption communication established in said web encryption communication step . 
Claim 28 (Currently amended): A control program of a communication system including a 
client receiving a Web E-mail service through a Web from a server, comprising a step of 
executing a management step of managing a key for decrypting an encrypted E-mail message 

addressed to a user's mail address, wherein the key for decrypting the encrypted E-mail 

i 

i 
i 
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message is not managed by the client , a web encryption communication step for establishing a 
Web encryption communication with the client, and communicating with the client by the 
e stablish e d Web encryption communication established in said web encryption communication 
step, an authentication step of executing authentication of &e a use allowance of the managed 
key managed in said management step to said the client based on authentication information 
sent from said the client when -said the client requests to decrypt the encrypted E-mail message 
while said the server communicates with the client by the established Web encryption 
communication, a decrypting step of making a decrypted message bv decrypting the encrypted 
E-mail message using the manag e d key managed in said management step in the case where 
the use allowance of the key managed in said management step is authenticated in said 
authentication step, and a transmission step of controlling to transmit the decrypted E-mail 
message decrypted in said decrypting step to -said the client through the e stablish e d Web 
encryption communication established in the web encryption communication step, and said the 
client comprising a requesting step of requesting to decrypt the encrypted E-mail message 
while said Web encryption communication is established between the server and the client, an 
authentication information sending step of sending the authentication information for 
authentication in said authentication step, and a receiving step of receiving the decrypted E- 
mail message transmitted in said transmission step to the client through oaid established the 
Web encryption communication established in said web encryption commnni cation step . 
Claim 29 (Currently Amended): A storage medium storing a computer executable control 
program of a communication system including a server of providing a Web E-mail service to a 
client, the program comprising a step of executing a management step of managing a key for 
decrypting said encrypted E-mail message addressed to a user's mail address using said 
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managed key, wherein the key for decrypting the encrypted E-mail message is not managed by 
the client, a web encryption communication step of establishing a Web encryption 
communication with the client, and communicating with the client by the establish e d Web 
encryption communication established in said web encryption communication step, an 
authentication step of executing authentication of the a use allowance of the manag e d key 
managed in said management step to said the client when said the client requests to decrypt the 
encrypted E-mail message while said the server communicates with the client by said 
established Web encryption communication, and a transmission control step of controlling to 
transmit the decrypted E-mail message to said the client through said established the Web 
encryption communication established in said web encryption communication step . 
Claim 30 (Currently amended): A storage medium storing a control program of a 
communication system including a client receiving a Web E-mail service through a Web from a 
server, wherein the program comprises a step of executing a management step of managing a 
key for decrypting an encrypted E-mail message addressed to a user's mail address, wherein 
the key for decrypting the encrypted E-mail message is not managed by the client, aweb 
encryption communication step of establishing a Web encryption communication with the 
client, and communicating with the client by the e stablished Web encryption communication 
established in said web encryption communication step, an authentication step of executing 
authentication of fche a use allowance of the managed key managed in said management step to 
said the client based on authentication information sent from said the client when said the client 
requests to decrypt the encrypted E-mail message while said the server communicates with the 
client by said established Web encryption communication, a decrypting step of making a 

decrypted message by decrypting the encrypted E-mail message using the managed key 

i 
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managed in said management step in the server in the case where the use allowance of the key 
managed in said management step is authenticated in said authentication step, and a 
transmission control step of controlling to transmit the decrypted E-mail message decrypted in 
said decrypting step to said the client through the e stnbliohod Web encryption communication 
established in said web encryption communication step, the client comprising a requesting step 
of requesting to decrypt the encrypted E-mail message while said Web encryption 
communication is established between the server and the client, an authentication information 
sending step of sending the authentication information for authentication in said authentication 
step, and a receiving step of receiving the decrypted E-mail message transmitted in said 
transm i ssion step to the client through said e stablished the Web encryption communication 
established in said web encryption communication step . 
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